This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File:                     x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier:          ye/kBL2Xiy6uvrZ8rvFINRFjjKr4ob/GKZEmGK3xxSc=
Subject key identifier:   B4:5E:3E:C7:C7:F9:DC:7F:DA:6F:B6:28:AD:34:A2:49:B6:58:1D:27
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer:       /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number:          01E5
Signing time:             Sun 25 Jan 2026 01:57:10 +0000
Manifest this update:     Sun 25 Jan 2026 01:57:09 +0000
Manifest next update:     Sun 01 Feb 2026 01:57:09 +0000
Files and hashes:         1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: pmYzFv4vQJRgmiGzs9IGRtSBwZh6mW0UeojWoTGbMiM=)
                          2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: Amgok0VNeeOi0Xzs/UuEsPD+TVZIQ/XSEwWrN16Emag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
                          rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
        Validity
            Not Before: Jan 25 01:57:09 2026 GMT
            Not After : Feb  1 01:57:09 2026 GMT
        Subject: CN=69757876-be5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:29:63:8d:c5:45:5c:44:a7:42:33:e8:68:
                    39:ac:b9:85:49:02:3b:f7:ff:1f:e6:3c:22:ab:4d:
                    30:4f:d6:2f:e5:f2:25:cb:23:0c:ff:58:40:e4:00:
                    d1:87:12:00:3c:89:c6:95:79:aa:5f:d1:f0:24:44:
                    4d:a9:e3:1e:b0:5c:ce:39:3d:c4:00:ea:98:12:7b:
                    d4:49:bf:26:45:0f:94:52:34:a9:7c:4f:49:61:cc:
                    a1:99:2b:95:56:cb:5a:1c:f2:37:13:10:be:8b:06:
                    fe:c9:86:1c:54:c8:9a:f3:e8:aa:0e:63:5e:f4:b7:
                    44:8c:ef:77:68:e2:92:2e:3d:78:63:d9:42:11:39:
                    b4:de:6e:b9:42:f0:a1:4b:05:bd:33:93:e0:29:6b:
                    07:c4:e5:fc:ef:7d:9f:0d:d8:4c:a4:99:e1:df:fa:
                    b5:7e:77:dc:9c:0a:29:b4:d3:d7:88:b7:43:fb:b6:
                    0b:e9:eb:46:1a:4f:42:cd:fe:2c:74:56:50:db:1d:
                    f0:4c:7a:fa:28:d9:1b:b3:9c:59:0f:db:63:7c:49:
                    70:4a:32:f4:9f:cd:d1:bb:63:a7:03:c4:c4:4e:c7:
                    3d:7b:5e:62:41:f7:d4:3f:5f:4f:c6:da:d3:2f:65:
                    bc:45:a7:fc:37:c1:e2:1d:bf:7f:95:d4:1d:22:d9:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5E:3E:C7:C7:F9:DC:7F:DA:6F:B6:28:AD:34:A2:49:B6:58:1D:27
            X509v3 Authority Key Identifier:
                keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:0d:5e:19:86:fe:c8:80:5e:be:1d:7f:d4:46:b0:b1:68:
         86:30:1e:fa:cf:e8:55:dd:1f:52:d7:7f:4c:8b:9c:53:8c:ab:
         1c:c7:51:28:9d:16:89:9e:9d:05:71:55:ae:84:e8:e7:84:c0:
         57:ed:1e:05:2d:6c:0e:43:9c:1d:66:90:26:9e:29:a8:27:cd:
         93:d6:d9:30:e6:b6:ee:ec:2f:ab:eb:af:23:84:d7:02:ea:40:
         2c:dc:84:e8:9c:ec:09:fb:50:fa:4c:e5:73:c8:35:04:f8:d2:
         6f:e0:47:4a:af:bc:78:f5:3f:9d:bc:58:01:3f:dc:0f:46:1c:
         be:4b:c3:ab:7f:68:da:77:2a:36:fe:51:32:2a:58:38:45:f0:
         02:27:ba:32:b6:ea:e7:a5:d7:cf:a2:c3:1b:18:da:d6:15:a1:
         5d:a6:e7:2d:12:cc:b6:c4:db:2a:18:01:fb:d0:c0:87:0d:95:
         65:ec:60:47:32:88:ae:90:05:d0:8b:24:91:47:77:79:ae:71:
         bf:f6:ab:7c:b3:68:9d:bc:d0:02:49:c6:8c:dc:5e:0e:f3:4e:
         76:1e:b4:2b:ba:64:d9:b4:13:40:50:01:f7:52:24:f7:7a:b0:
         3d:e8:9d:b0:d1:32:24:a2:2d:2b:5d:5d:73:32:cd:8b:18:6a:
         2f:86:96:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw
NzcwQjkzM0IwHhcNMjYwMTI1MDE1NzA5WhcNMjYwMjAxMDE1NzA5WjAYMRYwFAYD
VQQDDA02OTc1Nzg3Ni1iZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcQpY43FRVxEp0Iz6Gg5rLmFSQI79/8f5jwiq00wT9Yv5fIlyyMM/1hA5ADR
hxIAPInGlXmqX9HwJERNqeMesFzOOT3EAOqYEnvUSb8mRQ+UUjSpfE9JYcyhmSuV
VstaHPI3ExC+iwb+yYYcVMia8+iqDmNe9LdEjO93aOKSLj14Y9lCETm03m65QvCh
SwW9M5PgKWsHxOX8732fDdhMpJnh3/q1fnfcnAoptNPXiLdD+7YL6etGGk9Czf4s
dFZQ2x3wTHr6KNkbs5xZD9tjfElwSjL0n83Ru2OnA8TETsc9e15iQffUP19PxtrT
L2W8Raf8N8HiHb9/ldQdItmkuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRePsfH
+dx/2m+2KK00okm2WB0nMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw
RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV
SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8WQ1eGYb+yIBevh1/1EawsWiGMB76z+hV3R9S139Mi5xTjKscx1Eo
nRaJnp0FcVWuhOjnhMBX7R4FLWwOQ5wdZpAmnimoJ82T1tkw5rbu7C+r668jhNcC
6kAs3ITonOwJ+1D6TOVzyDUE+NJv4EdKr7x49T+dvFgBP9wPRhy+S8Orf2jadyo2
/lEyKlg4RfACJ7oyturnpdfPosMbGNrWFaFdpuctEsy2xNsqGAH70MCHDZVl7GBH
MoiukAXQiySRR3d5rnG/9qt8s2idvNACScaM3F4O8052HrQrumTZtBNAUAH3UiT3
erA96J2w0TIkoi0rXV1zMs2LGGovhpY9
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:17 2026 by rpki-client